Your privacy matters.

1. What data do we collect?

Maya collects and stores data necessary to provide your loved one with the best possible companionship and care. This includes:

• Account details — name, email address, phone number, and relationship to the senior
• Senior profile information — name, age, location, and interests
• Conversations with Maya — chat history to provide more personalized and empathetic responses
• Activity data — which activities are completed, results, and participation
• Wellbeing data — daily insights generated from conversations and activity patterns

2. How is your data stored?

All data is stored on secure servers and handled in compliance with GDPR and applicable data protection regulations. We use encryption both in transit and at rest to protect all personal information.

3. Sharing with guardians and caretakers

Maya may share wellbeing reports and activity data with the senior's family members (e.g., children or grandchildren) or designated caretakers — but only with the senior's explicit consent.

Information that may be shared with approved guardians/caretakers:

• Daily and weekly wellbeing reports
• Activity summaries — which activities were completed
• Wellbeing trends over time
• Alerts for anomalies (e.g., if the senior hasn't been active for several days)

Information that is never shared:

• Verbatim conversations with Maya — these are private and belong to the senior
• Sensitive health information not explicitly approved for sharing

4. How is your data used?

We use collected data to:

• Enable Maya to remember and carry on meaningful conversations
• Customize activities and recommendations based on the senior's interests
• Generate wellbeing reports for approved family members
• Improve the quality and safety of the service
• Provide aggregated, anonymized statistics to municipalities (never personally identifiable data)

5. Municipalities and organizations

When Maya is used through a municipality, the municipality receives access to anonymized and aggregated statistics — such as the number of active users, average wellbeing index, and activity rates.

Municipalities never have access to individual conversations, personal reports, or identifiable user data without separate consent.

6. Your rights

Under GDPR, you have the right to:

• Request access to all data we store about you or your loved one
• Correct inaccurate information
• Request deletion of all data — we delete all information within 30 days
• Revoke consent for data sharing at any time
• Export your data in a machine-readable format
• File a complaint with the relevant data protection authority

7. Contact us

Have questions about how we handle your data? Contact our data protection officer:

• Email: privacy@maya.com
• Phone: (555) 123-4567
• Address: Maya Inc., 123 Main Street, New York, NY 10001